How to structure escrow for a .org domain purchase

How to structure escrow for a .org domain purchase. UDRP and ccTLD domain recovery and defense across .org. Email the firm to assess your case.

You have identified a .org domain that fits your organization's identity. The current registrant is willing to sell. What stands between you and a clean, unencumbered transfer is the structure of the deal itself – specifically, how you hold funds, when the registrar releases the domain, and whether the name carries any dispute history that could undo the transaction after you pay.

To structure escrow for a .org domain purchase you need four things in order: a chain-of-title search, a pre-acquisition dispute-history check against WIPO and the Forum, a written purchase agreement that conditions disbursement on verified transfer at the PIR-accredited registrar, and a neutral third-party escrow service that holds funds until WHOIS confirms the registrant change. The UDRP applies in full to .org, so a domain that was once the subject of a complaint – or that closely resembles a registered mark – can be reclaimed from you by a future complainant even after a legitimate purchase. The standard WIPO filing fee for such a complaint starts at USD 1,500; the disruption cost to your organization is far higher.

This page covers the .org-specific legal context, the due-diligence steps, the escrow mechanics, the evidence that decides whether a domain is safe to acquire, and what to do when the seller's title is complicated.

Why .org raises distinct considerations for domain transactions

.org is a generic top-level domain operated by the Public Interest Registry (PIR) and governed by ICANN's standard accredited-registrar framework. That means the UDRP applies without modification. Any third party holding a registered trademark can file a UDRP complaint at WIPO, the Forum, CAC, or ADNDRC against the registrant of record – which, after your purchase, will be you.

Unlike a ccTLD such as .de or .uk, .org carries no nationality or residency requirement for registrants and no jurisdictional eligibility bar for complainants. The zone is also historically associated with nonprofits, foundations, and civil-society bodies, which means mark owners in those sectors are active UDRP filers. In our practice, we see .org acquisitions go wrong most often not because the escrow mechanics were faulty, but because the buyer skipped the dispute-history check and took title to a name that was already on a brand owner's watch list.

One practical nuance: .org does not have a separate zone-level dispute procedure beyond the UDRP. If a complaint is filed, it proceeds under the standard UDRP rules, with a 20-day response window from commencement and a typical decision timeline of about two months. There is no mediation stage, no registry-level hold, and no opt-out. The domain is locked during the proceeding.

What does pre-acquisition due diligence involve for a .org domain?

Due diligence for a .org domain purchase covers four distinct workstreams: chain-of-title review, prior-dispute search, trademark-conflict screening, and registrar-status verification.

Chain of title. WHOIS/RDDS records for .org are maintained through the standard PIR registry. You want to trace every registrant-of-record change back as far as the registry's WHOIS history permits. A domain that has changed hands frequently, been dropped and re-registered, or spent time in a registrar's redemption or pending-delete status may carry gaps that affect enforceability of your purchase agreement. Historical WHOIS data should be pulled from a reputable third-party service; the registry itself does not maintain a public ownership chain.

Prior UDRP and URS filings. Both WIPO and the Forum maintain searchable decision databases. Run the exact domain string – including common typos if the seller is also selling variants – through both. A prior complaint that the current registrant won is not necessarily a red flag; it may evidence a documented legitimate interest. A prior complaint that was withdrawn without a decision, however, may signal a settlement whose terms could bind a successor registrant or that the complainant simply regrouped. A prior complaint the registrant lost but did not comply with is a serious problem: a forced transfer ordered by the panel that was never executed means the rightful owner may still be identifiable.

Trademark conflict screening. Search the WIPO Global Brand Database and the USPTO (or the relevant national office for the likely complainant's home country) for identical or confusingly similar registered marks. The first UDRP element – confusing similarity – is a low threshold. Even a mark registered in a single jurisdiction suffices. If the domain is a common generic word or acronym, that screening context matters enormously; if it is a coined term or a close phonetic variant of a brand, proceed with heightened caution.

Registrar-status check. Confirm the domain is not currently in registrar-lock status due to a live dispute, a legal hold, or an ICANN compliance action. A domain with a registrar lock cannot be pushed or transferred until the lock is lifted by the registrar or the underlying proceeding is resolved.

For a read on whether the three UDRP elements are met for a .org domain you are considering, reach us at info@cognomenlaw.com.

How to structure the escrow mechanics

Escrow for a domain purchase is straightforward in concept but frequently mishandled in execution. The core principle is that funds and domain must change hands simultaneously – or as close to simultaneously as the registrar's transfer mechanism allows.

Select a neutral escrow service. Use a licensed, third-party escrow provider that specializes in domain transactions. The provider should hold funds in a segregated account, accept release instructions only on verified transfer confirmation, and have a documented dispute procedure if the transfer fails. Do not use the seller's legal counsel as escrow agent; that arrangement creates a conflict if the transfer is disputed.

Execute a written purchase agreement before opening escrow. The agreement should identify the domain string precisely (including the .org extension), state the purchase price and currency, specify the transfer method (registrar push or EPP auth code and registrar-level transfer), and include a representation and warranty by the seller that the domain is free of UDRP holds, court orders, registrar locks, and any encumbrances arising from a prior complaint. Tie escrow disbursement expressly to the condition that WHOIS/RDDS shows the buyer as registrant of record at the receiving registrar within an agreed window – typically five to ten business days.

Verify WHOIS before releasing funds. The escrow provider's standard confirmation step – "we received an auth code" – is not sufficient. The transfer is complete only when the receiving registrar's WHOIS record shows the buyer as registrant. Instruct the escrow provider contractually that its release condition is verified WHOIS change, not merely technical transfer initiation.

Account for the .org transfer lock period. ICANN policy imposes a 60-day lock on inter-registrar transfers after certain registrant-data changes. If the seller has recently updated WHOIS data – a common tactic to reset the clock – the 60-day lock may delay a clean inter-registrar push. Build this contingency into your escrow timeline and purchase agreement. An intra-registrar transfer (a push between accounts at the same registrar) avoids the inter-registrar lock but requires that both parties hold accounts at the same accredited registrar.

In a recent transaction (a .org domain in the education sector, spring 2025), we structured intra-registrar escrow for a client acquiring a five-figure-value domain from an overseas seller. The purchase agreement conditioned disbursement on verified WHOIS change within seven business days; the transfer completed in three. The pre-acquisition trademark screen identified one prior UDRP complaint that had been withdrawn; we reviewed the panel-correspondence record and confirmed no adverse finding had been made. Title transferred clean.

What evidence decides whether a .org domain is safe to acquire?

The question a buyer must answer before committing funds is whether a third-party UDRP complainant could meet all three elements of Paragraph 4(a) against the domain as registered to you post-transfer.

The first element – confusing similarity – turns on whether a registered mark owner can point to a mark that the domain reproduces or closely resembles. This is an objective comparison that does not depend on intent; a buyer who genuinely did not know about the mark is still exposed. The due-diligence trademark screen described above is the main tool against this risk.

The second element – no legitimate interest – is where the buyer's intended use becomes critical. If your organization has a documented, pre-existing brand connection to the domain string (a registered mark, a trade name, an ongoing nonprofit mission associated with the words), that record supports a Paragraph 4(c) safe harbor. Document that connection before you close. A generic or dictionary word used in its ordinary sense is harder for a complainant to challenge; a coined term or a mark variant requires stronger documentation of independent legitimate interest.

The third element – bad faith – looks at registration and use. As a new registrant, your registration date is post-acquisition. Panels have consistently held that a transfer of a domain that was registered in bad faith by the original registrant can be treated as a new registration in bad faith by the acquirer, particularly where the acquirer had constructive or actual notice of the trademark conflict. This is the precise reason the trademark screen must run before transfer, not after.

A micro-case from our practice illustrates the risk clearly. In a .org transaction we were asked to review (technology sector, autumn 2024), the proposed domain was a two-word phrase that matched the trading name of a mid-sized European nonprofit. The seller had held the name for roughly a decade without complaint. Our trademark screen identified a recently-filed international mark covering the same phrase. We advised the buyer to seek a representation that no trademark notice had been received and to structure a 90-day post-transfer indemnity from the seller. The buyer proceeded on those terms; no complaint followed.

To weigh the escrow structure and due-diligence scope for your specific .org acquisition, email info@cognomenlaw.com.

How does the purchase-agreement structure protect you if a UDRP complaint arrives after transfer?

A well-drafted purchase agreement is your primary contractual recourse if a complaint materializes post-transfer. The seller's representation that the domain is free of encumbrances and trademark conflicts, backed by an indemnity clause, shifts at least part of the risk to the seller. Three elements make that protection enforceable.

The indemnity scope. The indemnity should cover reasonable legal costs incurred in defending a UDRP complaint, the cost of any replacement domain if the transfer is ordered, and consequential losses directly linked to the registrant dispute. UDRP proceedings do not award monetary damages to a prevailing complainant; they order only transfer or cancellation. But the cost of a UDRP defense – commonly in the same range as a UDRP complaint, roughly USD 3,000–7,000 in legal fees at market rates for a single-domain case, separate from the forum filing fee – is real and should be indemnified by a seller whose representations were false.

The indemnity period. Trademark owners have no hard deadline to file a UDRP complaint after a domain is registered; the Policy imposes no statute of limitations. A five-year post-transfer indemnity period is reasonable for high-value .org acquisitions. Shorter periods are common for lower-value names.

The jurisdiction clause. The purchase agreement should specify a governing law and a dispute-resolution mechanism for indemnity claims. If the seller is overseas, consider whether a local court action is practical or whether arbitration in a neutral seat is preferable. For international transactions, we coordinate with local litigation counsel in the relevant jurisdiction when court enforcement of the indemnity is needed.

What is the decision path when the seller's title is complicated?

Not every .org acquisition involves a clean title history. Here are the most common complications and the routes that address each.

If the domain has a prior UDRP transfer order that was never implemented, the original complainant may have an outstanding right. Do not purchase that domain without direct written confirmation from the panel-designated complainant that it has no further claim. If the original proceeding was at WIPO or the Forum, the published decision will identify the complainant organization, though not always by individual contact. In some cases the complainant's interest will have lapsed; in others it will be live. There is no registry mechanism to check this automatically – it requires a targeted investigation.

If the domain is subject to a live registrar lock due to a UDRP proceeding or a URS suspension, the transfer cannot proceed at all until the lock is lifted. URS suspension in the new-gTLD space does not affect .org (which is a legacy gTLD, not a new gTLD), but a UDRP-related registrar lock can. Do not close escrow while a lock is active.

If the domain shows a recent WHOIS-data change that triggers the ICANN 60-day inter-registrar transfer lock, structure the purchase agreement to acknowledge the delay and set a longstop date for transfer. Hold the escrow funds through the longstop date and provide for mutual termination rights if the transfer does not complete.

If the seller cannot produce a clear title history and declines to give representations and warranties, that is a material risk signal. The absence of representations does not mean the domain is unsafe; it means the price should reflect the unhedged risk, or that the transaction should not proceed until title is clarified.

The decision matrix in practice: a clean .org with no prior disputes, a trademark screen showing no mark conflicts, and a straightforward seller warrant requires only the standard escrow structure described above. A .org with a prior complaint requires review of the decision and outcome before closing. A .org with an unresolved transfer order or live lock requires legal intervention before any funds change hands – and possibly a direct approach to the original complainant. A .org where the trademark screen shows a high-conflict zone requires either a legal-opinion letter on the Paragraph 4(a) elements or a walk away.

What forum and legal route applies if the domain is reclaimed after purchase?

If a UDRP complaint is filed against you as the post-purchase registrant, your defense position rests on the same three UDRP elements but approached from the Paragraph 4(c) respondent side. Panels have consistently recognized that a good-faith purchaser who acquired a domain without knowledge of a mark conflict, and who uses the domain in connection with a genuine organizational purpose, may sustain a legitimate-interest defense. The key is that the evidence – the purchase agreement, the due-diligence record, the trademark screen, the documented intended use – was created before transfer, not after a complaint arrives.

Where the complaint is itself abusive – filed by a brand owner who knows that the domain was acquired legitimately, in an attempt to use the UDRP process to extract a nuisance transfer – the respondent can seek a finding of Reverse Domain Name Hijacking (RDNH). An RDNH finding carries no monetary penalty, but it is a formal, published panel rebuke that deters repeat abusive filing. We regularly advise registrants who face these complaints and build the record needed to support an RDNH argument where the facts allow.

If a successful UDRP transfer order is executed despite a good-faith defense, the options are a court challenge in the registrar's jurisdiction (the UDRP Rules allow a party to take the matter to court within ten business days of notification of the decision, which suspends registrar implementation) or, in narrow circumstances, a request for reconsideration through the relevant forum's procedures. The UDRP's only remedy is transfer or cancellation; it cannot award compensation for the loss of a legitimately purchased domain. That is precisely why the indemnity clause in the purchase agreement matters.

For .org, the applicable forum is whichever ICANN-accredited provider the complainant selects – WIPO, the Forum, CAC, or ADNDRC. WIPO and the Forum together handle approximately 97% of all UDRP proceedings. If the complaint is filed, you will receive formal notification from the forum's case administrator and the 20-day response clock will start from commencement.

Related at COGNOMEN

• Domain transactions, due diligence, and portfolio brand-protection services
• How to draft and execute a domain assignment agreement correctly
• Recovering a typosquat domain: strategic analysis across gTLD zones